Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

We use a common file share apart from individual department based shares in our org.

Here's my scenario - I have individual Security Groups for each Department to which staff from the respective department are added.
Example groups: Dept A, Dept B, where Staff 1 belongs to Dept A and Staff 2 belongs to Dept B.

I also have a super group named Employees - the members being the Security Groups for each department and not individual staff members.
Members of Employees are Dept A & Dept B.

If I give read/write permission to the common share to the Employees super group, my assumption was that based on sub-group memberships, the permission will cascade down to individual staff members, i.e. Staff 1, Staff 2 etc. But that is not happening.

Only if I add each departmental group with R/W permissions to this share (Dept A, Dept B), is it working.

But this creates a lot of management overhead. Is there a way to add only the supergroup and be done with it? Am I missing something in permission inheritance here?

share|improve this question
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.